BTW, this comment was meant to be in response to the other thread "How I Lost My $50,000 Twitter Username (medium.com)"

https://news.ycombinator.com/item?id=7141532

But they're both pretty much the same problem. Service has complex/secret authentication policy, so users have no chance to be secure.